popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6316 2024-01-13 19:46 InstallSetup2.exe  

026dc7c174870bd1ccf25a3c58d69440


Emotet Gen1 TA551 BazarLoader NSIS Generic Malware Malicious Library UPX Malicious Packer Antivirus Admin Tool (Sysinternals etc ...) Anti_VM PE32 PE File DLL PE64 DllRegisterServer dll PNG Format OS Processor Check .NET DLL CAB MZP Format ZIP Format JPE Browser Info Stealer VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Ransomware Windows Browser DNS 		2 4 6 1 10.6 M 48 ZeroCERT

6317 2024-01-13 19:42 Invoke-Shellcode.ps1  

8d110271ce2244b30d00daa63a0bde62


Generic Malware Antivirus unpack itself 		0.4 M ZeroCERT

6318 2024-01-13 19:40 hhh.hta  

6be3e8b51f47ae0b17f18c2978170c07


Generic Malware Antivirus AntiDebug AntiVM PowerShell Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 2 10.4 M ZeroCERT

6319 2024-01-13 19:37 shell.dll  

470e404c0132733c3df4895672dbd282


Malicious Library UPX PE File DLL PE64 OS Processor Check Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		2.0 M ZeroCERT

6320 2024-01-13 19:33 amsi.ps1  

11a2c5a1096a4b63edcd96e578b1138d


Hide_EXE Generic Malware Antivirus VirusTotal Malware unpack itself 		1.2 M 27 ZeroCERT

6321 2024-01-13 19:31 newrock2.exe  

20dc7abde7dbae943356eb9bd311e9c0


NPKI HermeticWiper Generic Malware Suspicious_Script NSIS Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer Anti_VM Javascript_Blob PE32 PE File .NET EXE PNG Format JPEG Format OS Processor Check ZIP Format MZP Format PE6 Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS 		3 5 6 1 10.6 M ZeroCERT

6322 2024-01-13 19:29 teamviewer.exe  

fab9a49f34ba2e67cdbb4fe8e00fbd57


Malicious Library UPX PE32 PE File OS Processor Check 		M ZeroCERT

6323 2024-01-13 19:27 twoo.exe  

013dd34c1d52ad6a86419657437e247a


Client SW User Data Stealer LokiBot ftp Client info stealer Admin Tool (Sysinternals etc ...) .NET framework(MSIL) Malicious Library UPX Http API PWS Code injection AntiDebug AntiVM PE32 PE File MSOffice File .NET EXE DLL OS Processor Check Malware Telegram Buffer PE PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself AppData folder malicious URLs Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 5 3 11.6 M ZeroCERT

6324 2024-01-13 19:27 1.exe  

61266f99271cd5605d384c2953ac4fbf


Admin Tool (Sysinternals etc ...) .NET framework(MSIL) Malicious Library UPX Socket ScreenShot Steal credential DNS Code injection AntiDebug AntiVM PE32 PE File MSOffice File .NET EXE DLL OS Processor Check Buffer PE PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Detects VirtualBox AppData folder malicious URLs Windows ComputerName DNS Cryptographic key 		1 9.6 M ZeroCERT

6325 2024-01-13 19:26 InstallSetup10.exe  

d5610fe6893c1bb0df7b32471f878839


NSIS Generic Malware Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer Anti_VM PE32 PE File PNG Format OS Processor Check MZP Format ZIP Format JPEG Format BMP Format CHM Format DLL icon PE64 CAB MSOffice File Word 2007 f Malware Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk IP Check VM Disk Size Check Tofsee Ransomware Windows DNS 		3 6 10 1 8.8 M ZeroCERT

6326 2024-01-13 19:23 InstallSetup7.exe  

e2ebe1a39955919490d77003ebd1e24a


NPKI HermeticWiper NSIS Generic Malware Suspicious_Script Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer Anti_VM Javascript_Blob PE32 PE File PNG Format JPEG Format OS Processor Check MZP Format ZIP Format icon BMP For VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk IP Check VM Disk Size Check Ransomware Windows DNS 		2 4 7 1 9.4 M 47 ZeroCERT

6327 2024-01-13 19:22 she.exe  

9c1dc78462bfce4ded92e18ce7e15d9b


Generic Malware Malicious Library UPX Antivirus PE File PE64 OS Processor Check PowerShell powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		1 6.4 M ZeroCERT

6328 2024-01-13 19:20 updationavailableforentierospr...  

8f65da99c939a67fd8065dd8890374ab


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		2 5 3 4.6 M 31 ZeroCERT

6329 2024-01-13 19:18 one.exe  

bd94daa7872d164c29dcdf71a89b4771


Client SW User Data Stealer LokiBot ftp Client info stealer Admin Tool (Sysinternals etc ...) .NET framework(MSIL) Malicious Library UPX Http API PWS Code injection AntiDebug AntiVM PE32 PE File MSOffice File .NET EXE DLL OS Processor Check VirusTotal Malware Telegram Buffer PE PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself AppData folder malicious URLs Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 5 3 12.6 37 ZeroCERT

6330 2024-01-13 19:14 red.exe  

3c78cef4203a47012167be0877274540


RedlineStealer RedLine Infostealer RedLine stealer .NET framework(MSIL) UPX Malicious Library Malicious Packer Antivirus PE32 PE File .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 4 9 9.2 M 58 ZeroCERT

keyword